Book, Hacking and Information Security - Cyber Security Informer

IHG suffered a cyberattack that severely impacted its booking process

Security Affairs

SEPTEMBER 10, 2022

The attack significantly disrupted IHG’s booking channels and other applicationsì, a circumstance that suggests that the company was the victim of a ransomware attack. The security breach also impacted the booking process through third-party sites such as Expedia and Booking.com, and the service was intermittently resumed during this week.

Technology

Technology Hacking Ransomware Information Security

World’s largest distributors of books Baker & Taylor hit by ransomware

Security Affairs

AUGUST 30, 2022

Baker & Taylor, one of the world’s largest distributors of books, revealed that it was hit by a ransomware attack. Baker & Taylor, one of the world’s largest distributors of books worldwide, suffered a ransomware attack on August 23. SecurityAffairs – hacking, Baker & Taylor). Pierluigi Paganini.

Ransomware

Ransomware Hacking Cybercrime Information Security

Black Basta ransomware gang hacked Hyundai Motor Europe

Security Affairs

FEBRUARY 9, 2024

Black Basta ransomware gang claims the hack of the car maker Hyundai Motor Europe and the theft of three terabytes of their data. In April, Hyundai suffered another data breach that impacted Italian and French car owners and customers who booked a test drive. The intrusion aimed at stealing automotive trade secrets.

Hacking

Hacking Ransomware Data breaches Manufacturing

ALPHV/BlackCat ransomware gang hacked the hotel chain Motel One

Security Affairs

SEPTEMBER 30, 2023

The group reported that the alleged stolen data includes booking confirmations for the past 3 years. Exposed records include customers’ names, addresses, dates of reservation, payment method, and contact information. The ALPHV group added that stolen files also include customers’ credit card and other sensitive information.

Hacking

Hacking Ransomware Manufacturing Media

KindleDrip exploit – Hacking a Kindle device with a simple email

Security Affairs

JANUARY 22, 2021

Security experts at Realmode Labs discovered multiple vulnerabilities in the Kindle e-reader that could have allowed an attacker to take over victims’ devices. “The first vulnerability allowed an attacker to send an e-book to the victim’s Kindle device. To my pleasant surprise, the e-book appeared on the device!

Hacking

Hacking Authentication Firmware Phishing

Hacking IoT Security with Aaron Guzman

Security Boulevard

AUGUST 30, 2021

Information security is no longer staying on our laptops and in our browsers. As our devices become increasingly interconnected too, we have to start thinking about the security of our IoT devices. Aaron Guzman is a published author and a technical reviewer for several security books.

IoT

IoT Hacking Education Technology

Magecart attackers target mobile users of hotel chain booking websites

Security Affairs

SEPTEMBER 19, 2019

Trend Micro researchers reported that a Magecart group has hacked the websites of two hotel chains to inject scripts targeting Android and iOS users. Researchers discovered a series of incidents involving software credit card skimmer used by Magecart to hit the booking websites of hotel chains. com / gtm [. ]

Mobile

Mobile Advertising Hacking Software

Flight booking platform Option Way exposes customer and internal data

Security Affairs

SEPTEMBER 2, 2019

Researchers from vpnMentor security firm have recently discovered a huge data breach in flight booking platform Option Way. . Researchers at vpnMentor discovered a huge data breach in flight booking platform Option Way as part of a web-mapping project. . ” continues the analysis. Pierluigi Paganini.

Data breaches

Data breaches Advertising Encryption Risk

Russia-linked APT28 hacked Roundcube email servers of Ukrainian entities

Security Affairs

JUNE 21, 2023

Russia-linked APT28 group hacked into Roundcube email servers belonging to multiple Ukrainian organizations. The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , BlueDelta, and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide.

Hacking

Hacking Government Phishing Malware

Dive Inside the Mind of a Hacker in Kevin Mitnick’s Book, The Art of Deception

Mitnick Security

SEPTEMBER 22, 2022

Kevin Mitnick, founder of Mitnick Security, is known worldwide for his part in transforming the information security industry into what it is today. Kevin grew up learning that tricking people in the form of social engineering and cybersecurity hacking was not only fun, it earned him attention and respect.

Social Engineering

Social Engineering Engineering Information Security Hacking

Security Affairs newsletter Round 476 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

JUNE 16, 2024

London hospitals canceled over 800 operations in the week after Synnovis ransomware attack DORA Compliance Strategy for Business Leaders City of Cleveland still working to fully restore systems impacted by a cyber attack Two Ukrainians accused of spreading Russian propaganda and hack soldiers’ phones Google fixed an actively exploited zero-day (..)

Data breaches

Data breaches Hacking Ransomware Cyber Attacks

Pokemon Company resets some users’ passwords

Security Affairs

MARCH 20, 2024

The Pokemon Company resets some users’ passwords in response to hacking attempts against some of its users. The Pokemon Company announced it had reset the passwords for some accounts after it had detected hacking attempts, Techcrunch first reported. The company was likely the target of credential stuffing attacks.

Passwords

Passwords Accountability Authentication Hacking

Some American Express customers’ data exposed in a third-party data breach

Security Affairs

MARCH 4, 2024

” The security breach occurred at a service provider that lets customers book flights, hotels and other reservations using an online portal. The hacked third-party merchant processor was processing American Express Card member data.

Data breaches

Data breaches Accountability Hacking Mobile

UK NHS call for O-type blood donations following ransomware attack on London hospitals

Security Affairs

JUNE 10, 2024

“England’s top doctor has today (Monday 10 June) backed calls from NHS Blood and Transplant (NHSBT) for O Positive and O Negative blood donors to urgently book appointments to donate in one of the 25 town and city centre NHS Blood Donor Centres in England , to boost stocks of O type blood following the cyber incident in London.

Ransomware

Ransomware Healthcare Cyber Attacks Hacking

Participants earned more than $1.3M at the Pwn2Own Automotive competition

Security Affairs

JANUARY 27, 2024

million for hacking Teslas, infotainment systems, and electric vehicle chargers at the Pwn2Own Automotive competition. The first ever #Pwn2Own Automotive is in the books! that exploited a buffer overflow to hack the EMPORIA EV Charger Level 2. also chained to flaws to hack the Phoenix Contact CHARX SEC-3100.

Hacking

Hacking Information Security

Ransomware group Dark Angels claims the theft of 1TB of data from chipmaker Nexperia

Security Affairs

APRIL 16, 2024

The Dark Angels (Dunghill) ransomware group claims the hack of the chipmaker Nexperia and the theft of 1 TB of data from the company. The Dark Angels (Dunghill) ransomware group claims responsibility for hacking chipmaker Nexperia and stealing 1 TB of the company’s data.

Ransomware

Ransomware Manufacturing Hacking Insurance

Spyware, ransomware and Nation-state hacking: Q&A from a recent interview

Security Affairs

FEBRUARY 10, 2022

I transcribed a recent interview, here some questions and answers about nation-state hacking, spyware, and cyber warfare. Enjoy” How has spyware changed the rules of cyber security in recent years? What will cyber security look like now that those tools are all over the internet? SecurityAffairs – hacking, spyware).

Spyware

Spyware Hacking Ransomware Surveillance

London hospitals canceled over 800 operations in the week after Synnovis ransomware attack

Security Affairs

JUNE 15, 2024

England’s top doctor has today (Monday 10 June) backed calls from NHS Blood and Transplant (NHSBT) for O Positive and O Negative blood donors to urgently book appointments to donate in one of the 25 town and city centre NHS Blood Donor Centres in England , to boost stocks of O type blood following the cyber incident in London.”

Ransomware

Ransomware Healthcare Cyber Attacks Hacking

Hackers exploit 3-years old flaw to wipe Western Digital devices

Security Affairs

JUNE 25, 2021

Threat actors are wiping many Western Digital (WD) My Book Live and My Book Live Duo NAS devices likely exploiting an old vulnerability. Owners of Western Digital (WD) claim that their My Book Live and My Book Live Duo network-attached storage (NAS) devices have been wiped. SecurityAffairs – hacking, Western Digital).

Firmware

Firmware Internet Internet Hacking

A consumer-grade spyware app found in check-in systems of 3 US hotels

Security Affairs

MAY 22, 2024

The software was used by someone to capture screenshots of the hotel booking systems, including guest details. Pierluigi Paganini Follow me on Twitter: @securityaffairs and Facebook and Mastodon ( SecurityAffairs – hacking, consumer-grade spyware app ) “ PCTattletale is a simple stalkerware app. .”

Spyware

Spyware Surveillance Software Internet

A new Android malware used to spy on the Uyghur Community

Security Affairs

SEPTEMBER 6, 2022

The malware disguised as a book titled “ The China Freedom Trap ,” which is a biography written by the exiled Uyghur leader Dolkun Isa. ” The app allows to steal device information, SMSs, contacts’ data, call logs, and neighboring cell information. . SecurityAffairs – hacking, Uyghur community).

Malware

Malware Spyware Mobile Banking

Unsupervised Learning: No. 232

Daniel Miessler

JUNE 8, 2020

THIS WEEK’S TOPICS: COVID-19 Trends, New Zoom Trouble, Facebook Blocking, Chrome Incognito Suit, Retail Rents, Nuclear Contractor Hack, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…. Subscribe To Podcast. Show Notes. Newsletter. All Episodes. —.

Retail

Retail Technology Hacking Information Security

Online job offers, the reshipping and money mule scams

Security Affairs

JUNE 17, 2024

About the author: Salvatore Lombardo ( Twitter @Slvlombardo ) Electronics engineer and Clusit member, for some time now, espousing the principle of conscious education, he has been writing for several online magazine on information security. Education improves awareness” is his slogan.

Scams

Scams Marketing Education Banking

Data leak exposes users of car-sharing service Blink Mobility

Security Affairs

DECEMBER 21, 2023

The database included the personally identifiable information of Blink Mobility customers and administrators, including: Phone number Email address Encrypted password Registration date Device info and device token Details on subscription and rented vehicles (license plate, VIN, booking start and end location, etc.)

Mobile

Mobile Identity Theft Passwords Phishing

How You Can Hack Your Senses to Work Better

IT Security Guru

AUGUST 8, 2022

80% of information security personnel say they’re dealing with more stress in the wake of the pandemic, however the impacts are rarely talked about. The Zensory is the first step in hacking your habits to help rather than harm you. . The post How You Can Hack Your Senses to Work Better appeared first on IT Security Guru.

Hacking

Hacking CISO Cybersecurity Healthcare

Over 3.7 million accounts were compromised in the FlexBooker data breach

Security Affairs

JANUARY 7, 2022

. “In December 2021, the online booking service FlexBooker suffered a data breach that exposed 3.7 The data was found being actively traded on a popular hacking forum. SecurityAffairs – hacking, IKEA). million accounts were compromised in the FlexBooker data breach appeared first on Security Affairs.

Data breaches

Data breaches Accountability Passwords Cybercrime

Insurance scams via QR codes: how to recognise and defend yourself

Security Affairs

MARCH 12, 2024

Credit: Truffe assicurative tramite QR code: come riconoscerle e difendersi About the author: Salvatore Lombardo ( Twitter @Slvlombardo ) Electronics engineer and Clusit member, for some time now, espousing the principle of conscious education, he has been writing for several online magazine on information security.

Insurance

Insurance Scams Education Engineering

Episode 148: Joseph Menn on Cult of the Dead Cow also Veracode CEO Sam King on InfoSec’s Leaky Talent Pipeline

The Security Ledger

JUNE 5, 2019

In this week's episode of the podcast: Joseph Menn's new book Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World hit store shelves this week. Also: is the talent pipeline for information security empty, or has it sprung a leak? We're joined. Read the whole entry. »

Digital transformation

Digital transformation Hacking Information Security InfoSec

Hospitality Chain McMenamins discloses data breach after ransomware attack

Security Affairs

JANUARY 4, 2022

Guests are being thanked for their patience and asked to call the property directly for information on bookings, and to wait until the new year for later bookings. All McMenamins locations are securely accepting credit cards through the Dinerware, an on-site point of sale system. SecurityAffairs – hacking, ransomware).

Data breaches

Data breaches Ransomware Insurance Banking

Nurturing Our Cyber Talent

IT Security Guru

SEPTEMBER 25, 2023

Attacks such as hacking, phishing, ransomware and social engineering are on the rise. Businesses and other organisations are being pushed both by customers and regulators to evidence how they are keeping their information secure. I wrote several books to share knowledge with those embarking on a career in cybersecurity.

CISO

CISO Identity Theft Cybercrime Cybersecurity

FBI seized other domains used by the shadow eBook library Z-Library

Security Affairs

MAY 6, 2023

Z-Library is the world’s largest illegal library and claims to offer more than 11 million e-books for download. The library has been active since 2009, it offers e-book files in a variety of file formats, stripped of their copyright protections. Z-Library operates as a complex network of approximately 249 interrelated web domains.

Accountability

Accountability Hacking Cybersecurity Cybercrime

Reverse Threat Modeling for Pursuing Attribution

Daniel Miessler

JULY 19, 2020

I was thinking about the recent Twitter hack the other day and thought of a simple technique for evaluating possible threat actors of information warfare campaigns. With Threat Modeling we are looking at potential situations before an attack has occurred, and the focus is on what technique may be used.

Hacking

Hacking Information Security

Hyundai suffered a data breach that impacted customers in France and Italy

Security Affairs

APRIL 12, 2023

Hyundai disclosed a data breach that impacted Italian and French car owners and clients who booked a test drive. Hyundai has suffered a data breach that impacted Italian and French car owners and customers who booked a test drive.

Data breaches

Data breaches Media Manufacturing Education

Security Affairs newsletter Round 426 by Pierluigi Paganini – International edition

Security Affairs

JULY 2, 2023

WordPress sites using the Ultimate Member plugin are under attack LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC Avast released a free decryptor for the Windows version of the Akira ransomware Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor miniOrange’s WordPress Social Login and Register plugin (..)

Cybercrime

Cybercrime Hacking Ransomware Malware

Data from Airlink International UAE leaked on multiple dark web forums

Security Affairs

OCTOBER 8, 2020

Leaked data includes 14 folders and 53,555 files divided into the following categories: Passport scans Flight bookings Hotel bookings Email communications between Airlink International Group employees and customers Insurance policy for international travel. SecurityAffairs – hacking, Airlink International UAE).

Advertising

Advertising Insurance Backups Media

British Library suffers major outage due to cyberattack

Security Affairs

NOVEMBER 1, 2023

It is located in London and houses a collection of over 150 million items, including books, manuscripts, maps, newspapers, magazines, music recordings, and films. The library launched an investigation into the incident with the help of the National Cyber Security Centre (NCSC) and other experts.

Technology

Technology Cyber Attacks Hacking Cybersecurity

“My Slice”, an Italian adaptive phishing campaign

Security Affairs

JANUARY 22, 2024

Below are the IoCs of the campaign: [link] [link] About the author: Salvatore Lombardo ( Twitter @Slvlombardo ) Electronics engineer and Clusit member, for some time now, espousing the principle of conscious education, he has been writing for several online magazine on information security. Education improves awareness” is his slogan.

Phishing

Phishing Education Social Engineering Media

Cryptocurrencies and cybercrime: A critical intermingling

Security Affairs

APRIL 26, 2024

About the author: Salvatore Lombardo ( Twitter @Slvlombardo ) Electronics engineer and Clusit member, for some time now, espousing the principle of conscious education, he has been writing for several online magazine on information security. Education improves awareness” is his slogan.

Cryptocurrency

Cryptocurrency Cybercrime Education Scams

Web developers SitePoint discloses a data breach

Security Affairs

FEBRUARY 7, 2021

The website, and publisher of books, courses and articles for web developers, SitePoint discloses a data breach that impacted 1M users. SitePoint is an Australian-based website, and publisher of books, courses and articles for web developers. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Data breaches

Data breaches Passwords Cybercrime Accountability

Cybersecurity, why a hotline number could be important?

Security Affairs

OCTOBER 6, 2023

About the author: Salvatore Lombardo Electronics engineer and Clusit member, for some time now, espousing the principle of conscious education, he has been writing for several online magazine on information security. He is also the author of the book “La Gestione della Cyber Security nella Pubblica Amministrazione”.

Cybersecurity

Cybersecurity Cybercrime Computers and Electronics Education

Sextortion campaign uses Goontact spyware to target Android and iOS users

Security Affairs

DECEMBER 16, 2020

In reality, the victims communicated with Goontact operators that attempt to trick them into installing (or sideload) a mobile application that steals the victim’s address book. SecurityAffairs – hacking, Goontact). ” continues the report. ” conclude the experts. Pierluigi Paganini.

Spyware

Spyware Mobile Surveillance Malware

Security Affairs newsletter Round 383

Security Affairs

SEPTEMBER 11, 2022

Every week the best security articles from Security Affairs free for you in your email box. SecurityAffairs – hacking, newsletter). The post Security Affairs newsletter Round 383 appeared first on Security Affairs. If you want to also receive for free the newsletter with the international press subscribe here.

Data breaches

Data breaches Ransomware Malware Phishing

Boston Public Library discloses cyberattack

Security Affairs

AUGUST 30, 2021

All locations will remain open, patrons will still be able to check out books, and some online services remain operational. . SecurityAffairs – hacking). The post Boston Public Library discloses cyberattack appeared first on Security Affairs. ” concludes the statement. Follow me on Twitter: @securityaffairs and Facebook.

Technology

Technology Hacking Cybersecurity Information Security

Millions of People Can Lose Sensitive Data through Travel Apps, Privacysavvy reports

Security Affairs

MARCH 19, 2021

According to a report published by researchers at PrivacySavvy, many travel companies expose users’ data through their booking apps. In a report published on the 16 th of March by PrivacySavvy, many travel companies expose users’ data through their booking apps. SecurityAffairs – hacking, Travel Apps).

Data breaches

Data breaches Encryption Hacking Healthcare

IHG suffered a cyberattack that severely impacted its booking process

World’s largest distributors of books Baker & Taylor hit by ransomware

Trending Sources

Black Basta ransomware gang hacked Hyundai Motor Europe

ALPHV/BlackCat ransomware gang hacked the hotel chain Motel One

KindleDrip exploit – Hacking a Kindle device with a simple email

Hacking IoT Security with Aaron Guzman

Magecart attackers target mobile users of hotel chain booking websites

Flight booking platform Option Way exposes customer and internal data

Russia-linked APT28 hacked Roundcube email servers of Ukrainian entities

Dive Inside the Mind of a Hacker in Kevin Mitnick’s Book, The Art of Deception

Security Affairs newsletter Round 476 by Pierluigi Paganini – INTERNATIONAL EDITION

Pokemon Company resets some users’ passwords

Some American Express customers’ data exposed in a third-party data breach

UK NHS call for O-type blood donations following ransomware attack on London hospitals

Participants earned more than $1.3M at the Pwn2Own Automotive competition

Ransomware group Dark Angels claims the theft of 1TB of data from chipmaker Nexperia

Spyware, ransomware and Nation-state hacking: Q&A from a recent interview

London hospitals canceled over 800 operations in the week after Synnovis ransomware attack

Hackers exploit 3-years old flaw to wipe Western Digital devices

A consumer-grade spyware app found in check-in systems of 3 US hotels

A new Android malware used to spy on the Uyghur Community

Unsupervised Learning: No. 232

Online job offers, the reshipping and money mule scams

Data leak exposes users of car-sharing service Blink Mobility

How You Can Hack Your Senses to Work Better

Over 3.7 million accounts were compromised in the FlexBooker data breach

Insurance scams via QR codes: how to recognise and defend yourself

Episode 148: Joseph Menn on Cult of the Dead Cow also Veracode CEO Sam King on InfoSec’s Leaky Talent Pipeline

Hospitality Chain McMenamins discloses data breach after ransomware attack

Nurturing Our Cyber Talent

FBI seized other domains used by the shadow eBook library Z-Library

Reverse Threat Modeling for Pursuing Attribution

Hyundai suffered a data breach that impacted customers in France and Italy

Security Affairs newsletter Round 426 by Pierluigi Paganini – International edition

Data from Airlink International UAE leaked on multiple dark web forums

British Library suffers major outage due to cyberattack

“My Slice”, an Italian adaptive phishing campaign

Cryptocurrencies and cybercrime: A critical intermingling

Web developers SitePoint discloses a data breach

Cybersecurity, why a hotline number could be important?

Sextortion campaign uses Goontact spyware to target Android and iOS users

Security Affairs newsletter Round 383

Boston Public Library discloses cyberattack

Millions of People Can Lose Sensitive Data through Travel Apps, Privacysavvy reports

Stay Connected